python/pyglue.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007
   4    Copyright (C) Matthias Dieter Wallnöfer          2009
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18 */
  19
  20 #include "lib/replace/system/python.h"
  21 #include "python/py3compat.h"
  22 #include "includes.h"
  23 #include "python/modules.h"
  24 #include "version.h"
  25 #include "param/pyparam.h"
  26 #include "lib/socket/netif.h"
  27 #include "lib/util/debug.h"
  28 #include "librpc/ndr/ndr_private.h"
  29 #include "lib/cmdline/cmdline.h"
  30 #include "libcli/util/hresult.h"
  31 #include "lib/crypto/gkdi.h"
  32
  33 void init_glue(void);
  34 static PyObject *PyExc_NTSTATUSError;
  35 static PyObject *PyExc_WERRORError;
  36 static PyObject *PyExc_HRESULTError;
  37 static PyObject *PyExc_DsExtendedError;
  38
  39 static PyObject *py_generate_random_str(PyObject *self, PyObject *args)
  40 {
  41         Py_ssize_t len;
  42         PyObject *ret;
  43         char *retstr;
  44
  45         if (!PyArg_ParseTuple(args, "n", &len)) {
  46                 return NULL;
  47         }
  48         if (len < 0) {
  49                 PyErr_Format(PyExc_ValueError,
  50                              "random string length should be positive, not %zd",
  51                              len);
  52                 return NULL;
  53         }
  54         retstr = generate_random_str(NULL, len);
  55         if (retstr == NULL) {
  56                 return PyErr_NoMemory();
  57         }
  58         ret = PyUnicode_FromStringAndSize(retstr, len);
  59         talloc_free(retstr);
  60         return ret;
  61 }
  62
  63 static PyObject *py_generate_random_password(PyObject *self, PyObject *args)
  64 {
  65         Py_ssize_t min, max;
  66         PyObject *ret;
  67         char *retstr;
  68
  69         if (!PyArg_ParseTuple(args, "nn", &min, &max)) {
  70                 return NULL;
  71         }
  72         if (max < 0 || min < 0) {
  73                 /*
  74                  * The real range checks happens in generate_random_password().
  75                  * Here just filter out any negative numbers.
  76                  */
  77                 PyErr_Format(PyExc_ValueError,
  78                              "invalid range: %zd - %zd",
  79                              min, max);
  80                 return NULL;
  81         }
  82
  83         retstr = generate_random_password(NULL, min, max);
  84         if (retstr == NULL) {
  85                 if (errno == EINVAL) {
  86                         return PyErr_Format(PyExc_ValueError,
  87                                             "invalid range: %zd - %zd",
  88                                             min, max);
  89                 }
  90                 return PyErr_NoMemory();
  91         }
  92         ret = PyUnicode_FromString(retstr);
  93         talloc_free(retstr);
  94         return ret;
  95 }
  96
  97 static PyObject *py_generate_random_machine_password(PyObject *self, PyObject *args)
  98 {
  99         Py_ssize_t min, max;
 100         PyObject *ret;
 101         char *retstr;
 102
 103         if (!PyArg_ParseTuple(args, "nn", &min, &max)) {
 104                 return NULL;
 105         }
 106         if (max < 0 || min < 0) {
 107                 /*
 108                  * The real range checks happens in
 109                  * generate_random_machine_password().
 110                  * Here we just filter out any negative numbers.
 111                  */
 112                 PyErr_Format(PyExc_ValueError,
 113                              "invalid range: %zd - %zd",
 114                              min, max);
 115                 return NULL;
 116         }
 117
 118         retstr = generate_random_machine_password(NULL, min, max);
 119         if (retstr == NULL) {
 120                 if (errno == EINVAL) {
 121                         return PyErr_Format(PyExc_ValueError,
 122                                             "invalid range: %zd - %zd",
 123                                             min, max);
 124                 }
 125                 return PyErr_NoMemory();
 126         }
 127         ret = PyUnicode_FromString(retstr);
 128         talloc_free(retstr);
 129         return ret;
 130 }
 131
 132 static PyObject *py_check_password_quality(PyObject *self, PyObject *args)
 133 {
 134         char *pass;
 135
 136         if (!PyArg_ParseTuple(args, "s", &pass)) {
 137                 return NULL;
 138         }
 139
 140         return PyBool_FromLong(check_password_quality(pass));
 141 }
 142
 143 static PyObject *py_generate_random_bytes(PyObject *self, PyObject *args)
 144 {
 145         Py_ssize_t len;
 146         PyObject *ret;
 147         uint8_t *bytes = NULL;
 148
 149         if (!PyArg_ParseTuple(args, "n", &len)) {
 150                 return NULL;
 151         }
 152         if (len < 0) {
 153                 PyErr_Format(PyExc_ValueError,
 154                              "random bytes length should be positive, not %zd",
 155                              len);
 156                 return NULL;
 157         }
 158         bytes = talloc_zero_size(NULL, len);
 159         if (bytes == NULL) {
 160                 PyErr_NoMemory();
 161                 return NULL;
 162         }
 163         generate_random_buffer(bytes, len);
 164         ret = PyBytes_FromStringAndSize((const char *)bytes, len);
 165         talloc_free(bytes);
 166         return ret;
 167 }
 168
 169 static PyObject *py_unix2nttime(PyObject *self, PyObject *args)
 170 {
 171         time_t t;
 172         unsigned int _t;
 173         NTTIME nt;
 174
 175         if (!PyArg_ParseTuple(args, "I", &_t)) {
 176                 return NULL;
 177         }
 178         t = _t;
 179
 180         unix_to_nt_time(&nt, t);
 181
 182         return PyLong_FromLongLong((uint64_t)nt);
 183 }
 184
 185 static PyObject *py_nttime2unix(PyObject *self, PyObject *args)
 186 {
 187         time_t t;
 188         NTTIME nt;
 189         if (!PyArg_ParseTuple(args, "K", &nt))
 190                 return NULL;
 191
 192         t = nt_time_to_unix(nt);
 193
 194         return PyLong_FromLong((uint64_t)t);
 195 }
 196
 197 static PyObject *py_float2nttime(PyObject *self, PyObject *args)
 198 {
 199         double ft = 0;
 200         double ft_sec = 0;
 201         double ft_nsec = 0;
 202         struct timespec ts;
 203         NTTIME nt = 0;
 204
 205         if (!PyArg_ParseTuple(args, "d", &ft)) {
 206                 return NULL;
 207         }
 208
 209         ft_sec = (double)(int)ft;
 210         ft_nsec = (ft - ft_sec) * 1.0e+9;
 211
 212         ts.tv_sec = (int)ft_sec;
 213         ts.tv_nsec = (int)ft_nsec;
 214
 215         nt = full_timespec_to_nt_time(&ts);
 216
 217         return PyLong_FromLongLong((uint64_t)nt);
 218 }
 219
 220 static PyObject *py_nttime2float(PyObject *self, PyObject *args)
 221 {
 222         double ft = 0;
 223         struct timespec ts;
 224         const struct timespec ts_zero = { .tv_sec = 0, };
 225         NTTIME nt = 0;
 226
 227         if (!PyArg_ParseTuple(args, "K", &nt)) {
 228                 return NULL;
 229         }
 230
 231         ts = nt_time_to_full_timespec(nt);
 232         if (is_omit_timespec(&ts)) {
 233                 return PyFloat_FromDouble(1.0);
 234         }
 235         ft = timespec_elapsed2(&ts_zero, &ts);
 236
 237         return PyFloat_FromDouble(ft);
 238 }
 239
 240 static PyObject *py_nttime2string(PyObject *self, PyObject *args)
 241 {
 242         PyObject *ret;
 243         NTTIME nt;
 244         TALLOC_CTX *tmp_ctx;
 245         const char *string;
 246         if (!PyArg_ParseTuple(args, "K", &nt))
 247                 return NULL;
 248
 249         tmp_ctx = talloc_new(NULL);
 250         if (tmp_ctx == NULL) {
 251                 PyErr_NoMemory();
 252                 return NULL;
 253         }
 254
 255         string = nt_time_string(tmp_ctx, nt);
 256         ret =  PyUnicode_FromString(string);
 257
 258         talloc_free(tmp_ctx);
 259
 260         return ret;
 261 }
 262
 263 static PyObject *py_set_debug_level(PyObject *self, PyObject *args)
 264 {
 265         unsigned level;
 266         if (!PyArg_ParseTuple(args, "I", &level))
 267                 return NULL;
 268         debuglevel_set(level);
 269         Py_RETURN_NONE;
 270 }
 271
 272 static PyObject *py_get_debug_level(PyObject *self,
 273                 PyObject *Py_UNUSED(ignored))
 274 {
 275         return PyLong_FromLong(debuglevel_get());
 276 }
 277
 278 static PyObject *py_fault_setup(PyObject *self,
 279                 PyObject *Py_UNUSED(ignored))
 280 {
 281         static bool done;
 282         if (!done) {
 283                 fault_setup();
 284                 done = true;
 285         }
 286         Py_RETURN_NONE;
 287 }
 288
 289 static PyObject *py_is_ntvfs_fileserver_built(PyObject *self,
 290                 PyObject *Py_UNUSED(ignored))
 291 {
 292 #ifdef WITH_NTVFS_FILESERVER
 293         Py_RETURN_TRUE;
 294 #else
 295         Py_RETURN_FALSE;
 296 #endif
 297 }
 298
 299 static PyObject *py_is_heimdal_built(PyObject *self,
 300                 PyObject *Py_UNUSED(ignored))
 301 {
 302 #ifdef SAMBA4_USES_HEIMDAL
 303         Py_RETURN_TRUE;
 304 #else
 305         Py_RETURN_FALSE;
 306 #endif
 307 }
 308
 309 static PyObject *py_is_ad_dc_built(PyObject *self,
 310                 PyObject *Py_UNUSED(ignored))
 311 {
 312 #ifdef AD_DC_BUILD_IS_ENABLED
 313         Py_RETURN_TRUE;
 314 #else
 315         Py_RETURN_FALSE;
 316 #endif
 317 }
 318
 319 static PyObject *py_is_selftest_enabled(PyObject *self,
 320                 PyObject *Py_UNUSED(ignored))
 321 {
 322 #ifdef ENABLE_SELFTEST
 323         Py_RETURN_TRUE;
 324 #else
 325         Py_RETURN_FALSE;
 326 #endif
 327 }
 328
 329 static PyObject *py_ndr_token_max_list_size(PyObject *self,
 330                 PyObject *Py_UNUSED(ignored))
 331 {
 332         return PyLong_FromLong(ndr_token_max_list_size());
 333 }
 334
 335 /*
 336   return the list of interface IPs we have configured
 337   takes an loadparm context, returns a list of IPs in string form
 338
 339   Does not return addresses on 127.0.0.0/8
 340  */
 341 static PyObject *py_interface_ips(PyObject *self, PyObject *args)
 342 {
 343         PyObject *pylist;
 344         int count;
 345         TALLOC_CTX *tmp_ctx;
 346         PyObject *py_lp_ctx;
 347         struct loadparm_context *lp_ctx;
 348         struct interface *ifaces;
 349         int i, ifcount;
 350         int all_interfaces = 1;
 351
 352         if (!PyArg_ParseTuple(args, "O|i", &py_lp_ctx, &all_interfaces))
 353                 return NULL;
 354
 355         tmp_ctx = talloc_new(NULL);
 356         if (tmp_ctx == NULL) {
 357                 PyErr_NoMemory();
 358                 return NULL;
 359         }
 360
 361         lp_ctx = lpcfg_from_py_object(tmp_ctx, py_lp_ctx);
 362         if (lp_ctx == NULL) {
 363                 talloc_free(tmp_ctx);
 364                 return PyErr_NoMemory();
 365         }
 366
 367         load_interface_list(tmp_ctx, lp_ctx, &ifaces);
 368
 369         count = iface_list_count(ifaces);
 370
 371         /* first count how many are not loopback addresses */
 372         for (ifcount = i = 0; i<count; i++) {
 373                 const char *ip = iface_list_n_ip(ifaces, i);
 374
 375                 if (all_interfaces) {
 376                         ifcount++;
 377                         continue;
 378                 }
 379
 380                 if (iface_list_same_net(ip, "127.0.0.1", "255.0.0.0")) {
 381                         continue;
 382                 }
 383
 384                 if (iface_list_same_net(ip, "169.254.0.0", "255.255.0.0")) {
 385                         continue;
 386                 }
 387
 388                 if (iface_list_same_net(ip, "::1", "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff")) {
 389                         continue;
 390                 }
 391
 392                 if (iface_list_same_net(ip, "fe80::", "ffff:ffff:ffff:ffff::")) {
 393                         continue;
 394                 }
 395
 396                 ifcount++;
 397         }
 398
 399         pylist = PyList_New(ifcount);
 400         for (ifcount = i = 0; i<count; i++) {
 401                 const char *ip = iface_list_n_ip(ifaces, i);
 402
 403                 if (all_interfaces) {
 404                         PyList_SetItem(pylist, ifcount, PyUnicode_FromString(ip));
 405                         ifcount++;
 406                         continue;
 407                 }
 408
 409                 if (iface_list_same_net(ip, "127.0.0.1", "255.0.0.0")) {
 410                         continue;
 411                 }
 412
 413                 if (iface_list_same_net(ip, "169.254.0.0", "255.255.0.0")) {
 414                         continue;
 415                 }
 416
 417                 if (iface_list_same_net(ip, "::1", "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff")) {
 418                         continue;
 419                 }
 420
 421                 if (iface_list_same_net(ip, "fe80::", "ffff:ffff:ffff:ffff::")) {
 422                         continue;
 423                 }
 424
 425                 PyList_SetItem(pylist, ifcount, PyUnicode_FromString(ip));
 426                 ifcount++;
 427         }
 428         talloc_free(tmp_ctx);
 429         return pylist;
 430 }
 431
 432 static PyObject *py_strcasecmp_m(PyObject *self, PyObject *args)
 433 {
 434         char *s1 = NULL;
 435         char *s2 = NULL;
 436         long cmp_result = 0;
 437         if (!PyArg_ParseTuple(args, PYARG_STR_UNI
 438                               PYARG_STR_UNI,
 439                               "utf8", &s1, "utf8", &s2)) {
 440                 return NULL;
 441         }
 442
 443         cmp_result = strcasecmp_m(s1, s2);
 444         PyMem_Free(s1);
 445         PyMem_Free(s2);
 446         return PyLong_FromLong(cmp_result);
 447 }
 448
 449 static PyObject *py_strstr_m(PyObject *self, PyObject *args)
 450 {
 451         char *s1 = NULL;
 452         char *s2 = NULL;
 453         char *strstr_ret = NULL;
 454         PyObject *result = NULL;
 455         if (!PyArg_ParseTuple(args, PYARG_STR_UNI
 456                               PYARG_STR_UNI,
 457                               "utf8", &s1, "utf8", &s2))
 458                 return NULL;
 459
 460         strstr_ret = strstr_m(s1, s2);
 461         if (!strstr_ret) {
 462                 PyMem_Free(s1);
 463                 PyMem_Free(s2);
 464                 Py_RETURN_NONE;
 465         }
 466         result = PyUnicode_FromString(strstr_ret);
 467         PyMem_Free(s1);
 468         PyMem_Free(s2);
 469         return result;
 470 }
 471
 472 static PyObject *py_get_burnt_commandline(PyObject *self, PyObject *args)
 473 {
 474         PyObject *cmdline_as_list, *ret;
 475         char *burnt_cmdline = NULL;
 476         Py_ssize_t i, argc;
 477         char **argv = NULL;
 478         TALLOC_CTX *frame = talloc_stackframe();
 479         bool burnt;
 480
 481         if (!PyArg_ParseTuple(args, "O!", &PyList_Type, &cmdline_as_list))
 482         {
 483                 TALLOC_FREE(frame);
 484                 return NULL;
 485         }
 486
 487         argc = PyList_GET_SIZE(cmdline_as_list);
 488
 489         if (argc == 0) {
 490                 TALLOC_FREE(frame);
 491                 Py_RETURN_NONE;
 492         }
 493
 494         argv = PyList_AsStringList(frame, cmdline_as_list, "sys.argv");
 495         if (argv == NULL) {
 496                 TALLOC_FREE(frame);
 497                 return NULL;
 498         }
 499
 500         burnt = samba_cmdline_burn(argc, argv);
 501         if (!burnt) {
 502                 TALLOC_FREE(frame);
 503                 Py_RETURN_NONE;
 504         }
 505
 506         for (i = 0; i < argc; i++) {
 507                 if (i == 0) {
 508                         burnt_cmdline = talloc_strdup(frame,
 509                                                       argv[i]);
 510                 } else {
 511                         burnt_cmdline
 512                                 = talloc_asprintf_append(burnt_cmdline,
 513                                                          " %s",
 514                                                          argv[i]);
 515                 }
 516                 if (burnt_cmdline == NULL) {
 517                         PyErr_NoMemory();
 518                         TALLOC_FREE(frame);
 519                         return NULL;
 520                 }
 521         }
 522
 523         ret = PyUnicode_FromString(burnt_cmdline);
 524         TALLOC_FREE(frame);
 525
 526         return ret;
 527 }
 528
 529 static PyMethodDef py_misc_methods[] = {
 530         { "generate_random_str", (PyCFunction)py_generate_random_str, METH_VARARGS,
 531                 "generate_random_str(len) -> string\n"
 532                 "Generate random string with specified length." },
 533         { "generate_random_password", (PyCFunction)py_generate_random_password,
 534                 METH_VARARGS, "generate_random_password(min, max) -> string\n"
 535                 "Generate random password (based on printable ascii characters) "
 536                 "with a length >= min and <= max." },
 537         { "generate_random_machine_password", (PyCFunction)py_generate_random_machine_password,
 538                 METH_VARARGS, "generate_random_machine_password(min, max) -> string\n"
 539                 "Generate random password "
 540                 "(based on random utf16 characters converted to utf8 or "
 541                 "random ascii characters if 'unix charset' is not 'utf8') "
 542                 "with a length >= min (at least 14) and <= max (at most 255)." },
 543         { "check_password_quality", (PyCFunction)py_check_password_quality,
 544                 METH_VARARGS, "check_password_quality(pass) -> bool\n"
 545                 "Check password quality against Samba's check_password_quality, "
 546                 "the implementation of Microsoft's rules: "
 547                 "http://msdn.microsoft.com/en-us/subscriptions/cc786468%28v=ws.10%29.aspx"
 548         },
 549         { "unix2nttime", (PyCFunction)py_unix2nttime, METH_VARARGS,
 550                 "unix2nttime(timestamp) -> nttime" },
 551         { "nttime2unix", (PyCFunction)py_nttime2unix, METH_VARARGS,
 552                 "nttime2unix(nttime) -> timestamp" },
 553         { "float2nttime", (PyCFunction)py_float2nttime, METH_VARARGS,
 554                 "pytime2nttime(floattimestamp) -> nttime" },
 555         { "nttime2float", (PyCFunction)py_nttime2float, METH_VARARGS,
 556                 "nttime2pytime(nttime) -> floattimestamp" },
 557         { "nttime2string", (PyCFunction)py_nttime2string, METH_VARARGS,
 558                 "nttime2string(nttime) -> string" },
 559         { "set_debug_level", (PyCFunction)py_set_debug_level, METH_VARARGS,
 560                 "set debug level" },
 561         { "get_debug_level", (PyCFunction)py_get_debug_level, METH_NOARGS,
 562                 "get debug level" },
 563         { "fault_setup", (PyCFunction)py_fault_setup, METH_NOARGS,
 564                 "setup the default samba panic handler" },
 565         { "interface_ips", (PyCFunction)py_interface_ips, METH_VARARGS,
 566                 "interface_ips(lp_ctx[, all_interfaces) -> list_of_ifaces\n"
 567                 "\n"
 568                 "get interface IP address list"},
 569         { "strcasecmp_m", (PyCFunction)py_strcasecmp_m, METH_VARARGS,
 570                 "(for testing) compare two strings using Samba's strcasecmp_m()"},
 571         { "strstr_m", (PyCFunction)py_strstr_m, METH_VARARGS,
 572                 "(for testing) find one string in another with Samba's strstr_m()"},
 573         { "is_ntvfs_fileserver_built", (PyCFunction)py_is_ntvfs_fileserver_built, METH_NOARGS,
 574                 "is the NTVFS file server built in this installation?" },
 575         { "is_heimdal_built", (PyCFunction)py_is_heimdal_built, METH_NOARGS,
 576                 "is Samba built with Heimdal Kerberos?" },
 577         { "generate_random_bytes",
 578                 (PyCFunction)py_generate_random_bytes,
 579                 METH_VARARGS,
 580                 "generate_random_bytes(len) -> bytes\n"
 581                 "Generate random bytes with specified length." },
 582         { "is_ad_dc_built", (PyCFunction)py_is_ad_dc_built, METH_NOARGS,
 583                 "is Samba built with AD DC?" },
 584         { "is_selftest_enabled", (PyCFunction)py_is_selftest_enabled,
 585                 METH_NOARGS, "is Samba built with selftest enabled?" },
 586         { "ndr_token_max_list_size", (PyCFunction)py_ndr_token_max_list_size,
 587                 METH_NOARGS, "How many NDR internal tokens is too many for this build?" },
 588         { "get_burnt_commandline", (PyCFunction)py_get_burnt_commandline,
 589                 METH_VARARGS, "Return a redacted commandline to feed to setproctitle (None if no redaction required)" },
 590         {0}
 591 };
 592
 593 static struct PyModuleDef moduledef = {
 594     PyModuleDef_HEAD_INIT,
 595     .m_name = "_glue",
 596     .m_doc = "Python bindings for miscellaneous Samba functions.",
 597     .m_size = -1,
 598     .m_methods = py_misc_methods,
 599 };
 600
 601 MODULE_INIT_FUNC(_glue)
 602 {
 603         PyObject *m;
 604         PyObject *py_obj = NULL;
 605         int ret;
 606
 607         debug_setup_talloc_log();
 608
 609         m = PyModule_Create(&moduledef);
 610         if (m == NULL)
 611                 return NULL;
 612
 613         PyModule_AddObject(m, "version",
 614                                            PyUnicode_FromString(SAMBA_VERSION_STRING));
 615         PyExc_NTSTATUSError = PyErr_NewException("samba.NTSTATUSError", PyExc_RuntimeError, NULL);
 616         if (PyExc_NTSTATUSError != NULL) {
 617                 Py_INCREF(PyExc_NTSTATUSError);
 618                 PyModule_AddObject(m, "NTSTATUSError", PyExc_NTSTATUSError);
 619         }
 620
 621         PyExc_WERRORError = PyErr_NewException("samba.WERRORError", PyExc_RuntimeError, NULL);
 622         if (PyExc_WERRORError != NULL) {
 623                 Py_INCREF(PyExc_WERRORError);
 624                 PyModule_AddObject(m, "WERRORError", PyExc_WERRORError);
 625         }
 626
 627         PyExc_HRESULTError = PyErr_NewException("samba.HRESULTError", PyExc_RuntimeError, NULL);
 628         if (PyExc_HRESULTError != NULL) {
 629                 Py_INCREF(PyExc_HRESULTError);
 630                 PyModule_AddObject(m, "HRESULTError", PyExc_HRESULTError);
 631         }
 632
 633         PyExc_DsExtendedError = PyErr_NewException("samba.DsExtendedError", PyExc_RuntimeError, NULL);
 634         if (PyExc_DsExtendedError != NULL) {
 635                 Py_INCREF(PyExc_DsExtendedError);
 636                 PyModule_AddObject(m, "DsExtendedError", PyExc_DsExtendedError);
 637         }
 638
 639         PyModule_AddObject(m, "HRES_E_INVALIDARG",
 640                            PyLong_FromUnsignedLongLong(HRES_ERROR_V(HRES_E_INVALIDARG)));
 641         PyModule_AddObject(m, "HRES_NTE_BAD_KEY",
 642                            PyLong_FromUnsignedLongLong(HRES_ERROR_V(HRES_NTE_BAD_KEY)));
 643         PyModule_AddObject(m, "HRES_NTE_NO_KEY",
 644                            PyLong_FromUnsignedLongLong(HRES_ERROR_V(HRES_NTE_NO_KEY)));
 645         PyModule_AddObject(m, "HRES_SEC_E_INVALID_TOKEN",
 646                            PyLong_FromUnsignedLongLong(HRES_ERROR_V(HRES_SEC_E_INVALID_TOKEN)));
 647         PyModule_AddObject(m, "HRES_SEC_E_LOGON_DENIED",
 648                            PyLong_FromUnsignedLongLong(HRES_ERROR_V(HRES_SEC_E_LOGON_DENIED)));
 649
 650         ret = PyModule_AddIntConstant(m, "GKDI_L1_KEY_ITERATION", gkdi_l1_key_iteration);
 651         if (ret) {
 652                 Py_DECREF(m);
 653                 return NULL;
 654         }
 655         ret = PyModule_AddIntConstant(m, "GKDI_L2_KEY_ITERATION", gkdi_l2_key_iteration);
 656         if (ret) {
 657                 Py_DECREF(m);
 658                 return NULL;
 659         }
 660         py_obj = PyLong_FromLongLong(gkdi_key_cycle_duration);
 661         if (py_obj == NULL) {
 662                 Py_DECREF(m);
 663                 return NULL;
 664         }
 665         ret = PyModule_AddObject(m, "GKDI_KEY_CYCLE_DURATION", py_obj);
 666         if (ret) {
 667                 Py_DECREF(py_obj);
 668                 Py_DECREF(m);
 669                 return NULL;
 670         }
 671         py_obj = PyLong_FromLongLong(gkdi_max_clock_skew);
 672         if (py_obj == NULL) {
 673                 Py_DECREF(m);
 674                 return NULL;
 675         }
 676         ret = PyModule_AddObject(m, "GKDI_MAX_CLOCK_SKEW", py_obj);
 677         if (ret) {
 678                 Py_DECREF(py_obj);
 679                 Py_DECREF(m);
 680                 return NULL;
 681         }
 682
 683         return m;
 684 }